3 Commits

Include renames

Author	SHA1	Message	Date
imSp4rky	a7d6791136	feat(remote): verify server-CDM vault keys on the client and report bad pairs ... The licence response lists KIDs a server vault supplied, the client proves them with the decode check, and a bad pair goes to the new session keys/bad route so the server flags its own row. Client vault keys go first over --remote, and the dashboard health warns when no SQLite vault can store flags.	2026-09-12 15:13:08 -06:00
imSp4rky	7c82282813	feat(vaults): flag and skip wrong content keys from poisoned vaults ... Verify a vault-sourced key with an FFmpeg decode after decryption. On failure flag the KID:KEY locally with its source, restore the ciphertext, and retry through the remaining vaults and then the CDM.	2026-09-12 13:11:44 -06:00
imSp4rky	627f1fa81c	fix(dl): cache server-CDM keys to the local vaults ... Batch and per-track remote licences read the vaults but never wrote back, so a --remote or import run kept nothing. Vault hits now replicate to the other vaults, and the server branch resolves keys under drm_lock like the local path.	2026-09-06 23:10:04 -06:00